{"id":"CVE-2026-99287","published":"2026-11-10T19:22:32.043","lastModified":"2026-11-10T21:22:23.010","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netback: Zero out sring pointers on unmap\n\nIf xenvif_map_frontend_data_rings() fails when a ring is already mapped,\nit unmaps them via xenvif_unmap_frontend_data_rings() which keeps the\nring pointers unchanged. xenvif_connect_data()'s cleanup path calls\nxenvif_disconnect_queue() which in turn calls\nxenvif_unmap_frontend_data_rings() again, which will attempt to unmap the\npointers a second time.\n\nZero out the ring pointers after they are unmapped to avoid this issue.\n\nThis is XSA-532","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/87fd475dc4e354088f6534285388e7b061f54b35","tags":[]},{"url":"https://git.kernel.org/stable/c/c5f54af611ff6fe1d53fa05d8e87b469dc56122b","tags":[]},{"url":"https://git.kernel.org/stable/c/e7ba61734d6ad6adfd5bf617052e590743211669","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/10/26","tags":[]},{"url":"http://xenbits.xen.org/xsa/advisory-532.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}